Analysis

  • max time kernel
    28s
  • max time network
    159s
  • platform
    android-10_x64
  • resource
    android-x64-20250917-en
  • resource tags

    arch:x64arch:x86image:android-x64-20250917-enlocale:en-usos:android-10-x64system
  • submitted
    04/10/2025, 04:34

General

  • Target
    c3jn21.apk
  • Size 5.9MB
  • Sample251004-e7d2ysysfx
  • SHA256 9aadd8fb01918d7ecbb9b2613d1a7551a51d69db97e51a056963adfa38b08370
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 60 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.cloudwave.service
    1⤵
    • Loads dropped Dex/Jar
    PID:5070

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dp.kotlin-v1.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v1.lua.mph
        • Size 12KB
        • SHA256 38d43e6b8de6fbe502e8d45b36ead62d69bb25418c14de1bbb772e9c27bc15b5
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v10.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v10.lua.mph
        • Size 74KB
        • SHA256 796d704f5d9fc5a767c3c32772eabfc75b9b13da4f3131524a0bb4869a0a370b
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v11.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v11.lua.mph
        • Size 112KB
        • SHA256 a5ec7754e19b00f8deeba7dc1a393fcbfb0296e756c8e0a6b54d15d05225c8d3
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v12.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v12.lua.mph
        • Size 132KB
        • SHA256 7ae9625e23688ad0861e4b028edaf3db5af7f5eb56c3e099e9a122d557e97b64
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v13.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v13.lua.mph
        • Size 73KB
        • SHA256 06ef29e98555e3cde676200f037d813f9dd59263b0d1742f8d99f48c37369181
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v14.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v14.lua.mph
        • Size 82KB
        • SHA256 3d1e4dd7bd39e533ae85f55fa5c3ba6d47d3c4bbb8513907aa2f54ba14a121b5
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v15.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v15.lua.mph
        • Size 70KB
        • SHA256 4d1f99660c68bde525bc52257be1c7090298adb394ee5a48b1947b90d814edc9
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v16.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v16.lua.mph
        • Size 83KB
        • SHA256 56fb7e4d3dd3ff164321b083085307e0540fbdaa1306651f57f980ca7e92c511
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v17.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v17.lua.mph
        • Size 35KB
        • SHA256 661f41bc1de25932a11bcf59d5d5c45362a34f6a2d02769e861c057ea661c131
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v18.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v18.lua.mph
        • Size 111KB
        • SHA256 8bfc574df38594e175c4737b4581301b81548d23824606c567acf1b18dae1ed2
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v19.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v19.lua.mph
        • Size 70KB
        • SHA256 921796df3cd5a6090d4a07a46847228ddaa7ec2fb176d39d21d323dcdf27ab3c
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v2.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v2.lua.mph
        • Size 99KB
        • SHA256 d35933abed6fb9ac825d45f02fa871295d0f6321f9a60abcc6765b11bfe0167a
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v20.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v20.lua.mph
        • Size 94KB
        • SHA256 36796dd0b35e183a9f4dfac28b22711716cee23ea648e0f4c7eb91559c69eabc
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v21.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v21.lua.mph
        • Size 73KB
        • SHA256 2ceb1170727b295666e7da1dab1756edd89881186825377669e0676db4622956
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v22.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v22.lua.mph
        • Size 70KB
        • SHA256 9bb513775388d4d7d436859765ad9adb9d08f7c1930694f552f39d210b2a81c1
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v23.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v23.lua.mph
        • Size 94KB
        • SHA256 29db8d4177cd7c6f8c70cd77f644977e92d264308686b9a745c981a4f06ab2e2
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v24.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v24.lua.mph
        • Size 44KB
        • SHA256 63fd38527261e166a85adac0336c322ff9e9a32685d3143f44257474dc917c0a
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v25.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v25.lua.mph
        • Size 32KB
        • SHA256 d56c81aba392f5029ff30e50850ab67d91f78dee573bb77c4bdde41a9ab04b83
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v26.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v26.lua.mph
        • Size 56KB
        • SHA256 89540f8e9f8c9789fe7f77e1595c0f71488d0c7061d0b071b79dd33d00d4a11d
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v27.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v27.lua.mph
        • Size 65KB
        • SHA256 735a94dffc8d7b9f0cbf716514feeae4b8acbca5149a446ad53ba29e9b2aa45e
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v28.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v28.lua.mph
        • Size 96KB
        • SHA256 347e56b7332f37eaf36008cfc42edb1e7bd537595068b303ebd0562c85fec0d4
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v29.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v29.lua.mph
        • Size 187KB
        • SHA256 31e97059d130b8df822780fa4158fc7bed8de6491a8353346b7aac6ea99880db
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v3.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v3.lua.mph
        • Size 59KB
        • SHA256 9488825fd731b3a40f70b0d2738f251a784457faa54f5cae4738927cfe0899e4
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v30.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v30.lua.mph
        • Size 2.7MB
        • SHA256 61e2ea80889dda35707dbea8cdb9be5a4c578cff945dbe045f9128b7a809cf10
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v4.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v4.lua.mph
        • Size 130KB
        • SHA256 211b1c77d4428ffd16f14f76b1add19499386145397a0e18f5be803b09b959fc
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v5.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v5.lua.mph
        • Size 88KB
        • SHA256 26bf5bb284fe1f86d1b318f802cf549d39765cd3bb5dc12980ddf533c27224c2
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v6.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v6.lua.mph
        • Size 101KB
        • SHA256 20fd4cce3044ce0af24eafda438badd540104d4c94f96158fffbafeede0183ae
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v7.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v7.lua.mph
        • Size 85KB
        • SHA256 1d6fa3f8aec10feaa0005687f5d3270e23b15e8ee9e957962be6da03777c6df6
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v8.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v8.lua.mph
        • Size 92KB
        • SHA256 2c5cb0c6e81443431641b3ce07e31854571a4e3ea3345b63197385b9db02360e
        • MD5 SHA1 SHA512 SSDEEP

        dp.kotlin-v9.lua.mph

        • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v9.lua.mph
        • Size 91KB
        • SHA256 6f61c8ef9a83e0f1d1da04b15cb15645b4e58181c2fe9c09e40bf95b7b6a99a4
        • MD5 SHA1 SHA512 SSDEEP